Cisco 200-201 Online Practice Questions and Exam Preparation

Cisco 200-201 Online Questions & Answers

• Question 311:

  A company had a recent breach and lost confidential data to a competitor. An internal investigation found out that a new junior accounting specialist logged in to the accounting server with their user ID and stole confidential data. The junior accounting specialist denies the action and claims that the attempt was done by someone else. During court proceedings, the company presents logs and CCTV camera recordings that show the malicious insider in action.

  Which type of evidence has the company presented?

  A. indirect and corroborative
  B. direct and corroborative
  C. circumstantial and direct
  D. corroborative and substantive
  B. direct and corroborative

• Question 312:

  An information security analyst inspects the .pcap file and observes encrypted unusual SSH traffic flow over nonstandard ports.

  Which technology makes this behavior feasible?

  A. NAT
  B. tunneling
  C. P2P
  D. TOR
  B. tunneling

• Question 313:

  Which classification of cross-site scripting attack executes the payload without storing it for repeated use?

  A. CSRF
  B. reflective
  C. DOM
  D. stored
  B. reflective

  ---

  Explanation

  Reflective XSS, also known as Non-Persistent XSS, occurs when an attacker sends a malicious script to a user through a web application, and the script is executed immediately in the user's browser without being stored on the server. This type of attack is typically carried out by including the malicious script in a URL, which is then sent to the victim. When the victim clicks on the link, the script runs in their browser, reflecting the attacker's actions without storing the payload for repeated use 12.

  References:

  OWASP Foundation's documentation on Cross-Site Scripting (XSS) provides detailed information on the different types of XSS attacks, including Reflective XSS

• Question 314:

  Refer to the exhibit.

  What is occurring?

  

  A. possible DNS amplification attack with requests that maximize data quantity
  B. possible DNS tunneling with encrypted communication through CNAMEs
  C. possible DNS cache poisoning with misdirects toward a fraudulent website
  D. possible botnet traffic with random MX querying to generate increased traffic
  B. possible DNS tunneling with encrypted communication through CNAMEs

• Question 315:

  DRAG DROP

  Drag and drop the definition from the left onto the phase on the right to classify intrusion events according to the Cyber Kill Chain model.

  Select and Place:

  

  

• Question 316:

  Refer to the exhibit.

  

  An engineer must use a 5-tuple approach to isolate a compromised host in a grouped set of logs.

  Which data must the engineer use?

  A. 66
  B. b4:2a0ef227 83
  C. 7c:5c:f8:9f:d1:fc
  D. 57813
  D. 57813

• Question 317:

  What ate two categories of DDoS attacks? (Choose two.)

  A. split brain
  B. scanning
  C. phishing
  D. reflected
  E. direct
  D. reflected
  E. direct

• Question 318:

  How can TOR impact data visibility inside an organization?

  A. no impact
  B. increases security
  C. increases data integrity
  D. decreases visibility
  D. decreases visibility

• Question 319:

  Which utility blocks a host portscan?

  A. HIDS
  B. sandboxing
  C. host-based firewall
  D. antimalware
  C. host-based firewall

• Question 320:

  What are two social engineering techniques? (Choose two.)

  A. privilege escalation
  B. DDoS attack
  C. phishing
  D. man-in-the-middle
  E. pharming
  C. phishing
  E. pharming

  ---

  Explanation

  Social engineering techniques often involve manipulating individuals into divulging confidential information or performing actions that compromise security. Phishing involves sending fraudulent messages (often emails) that appear to be from reputable sources with the goal of stealing sensitive data or installing malware. Pharming redirects the traffic of a legitimate website to another fraudulent website without the user's knowledge, aiming to collect the user's credentials.

  References:

  Cisco Cybersecurity Source Documents